Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.1
CVE-2024-9792: D-Link DSL-2750U Port Forwarding Page Can Be Manipulated Remotely
CVE-2024-9792 · published 2 years ago
Summary
A security issue in the D-Link DSL-2750U's Port Forwarding Page allows an attacker to inject malicious code into a user's browser. This could potentially allow an attacker to access sensitive information or take control of the router. To protect your network, update your router's firmware as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dlink | dsl-2750u_firmware |
r5b017 cpe:2.3:o:dlink:dsl-2750u_firmware:r5b017:*:*:*:*:*:*:* |
Original advisory text
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMapping...
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.
References
- https://vuldb.com/?ctiid.279945 Permissions Required
- https://vuldb.com/?id.279945 Third Party Advisory
- https://vuldb.com/?submit.415532 Third Party Advisory
- https://www.dlink.com/ Product
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published10 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-9792 · NVD
Track software like this
Free during beta